Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft
File: 0y0esOyO9aIwRXqXAueqOWhYGAw.mft (raw, json)
Hash identifier: u0+95vYZYtEFdz2WsyZP8HUTyvLcWa/oB1lmCdfqMjY=
Subject key identifier: 8F:6E:3F:C1:3B:25:28:0A:EB:F2:C6:24:0D:97:1C:7C:96:99:ED:79
Authority key identifier: D3:2D:1E:B0:EC:8E:F5:A2:30:45:7A:97:02:E7:AA:39:68:58:18:0C
Certificate issuer: /CN=d32d1eb0ec8ef5a230457a9702e7aa396858180c
Certificate serial: 019922FA07B381153C9428E6FB6B5242439B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0y0esOyO9aIwRXqXAueqOWhYGAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft
Manifest number: 0A80
Signing time: Sun 07 Sep 2025 07:00:35 +0000
Manifest this update: Sun 07 Sep 2025 07:00:35 +0000
Manifest next update: Mon 08 Sep 2025 07:00:35 +0000
Files and hashes: 1: 0y0esOyO9aIwRXqXAueqOWhYGAw.crl (hash: uxXE79oe9lfNfmaFETVjWub/qEaemyfdN814o6r7kj4=)
2: sK3ZBrWvjwd-LkmXtEXI8mmDAIM.roa (hash: OKskFb0lNjQYUF2WZOv8rV/0FbI0umbg74GYmLaJ8S4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0y0esOyO9aIwRXqXAueqOWhYGAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:07:b3:81:15:3c:94:28:e6:fb:6b:52:42:43:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d32d1eb0ec8ef5a230457a9702e7aa396858180c
Validity
Not Before: Sep 7 07:00:35 2025 GMT
Not After : Sep 8 07:00:35 2025 GMT
Subject: CN=8f6e3fc13b25280aebf2c6240d971c7c9699ed79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:02:e5:46:b8:ad:22:27:7b:86:ee:b9:8b:52:
c9:b8:c0:ca:8c:43:4a:3b:8d:d6:81:89:56:4b:53:
15:73:16:01:81:d0:dd:58:74:2c:45:10:f5:9f:aa:
0d:6e:66:55:52:cf:23:e2:5d:2c:93:18:c6:ec:82:
68:12:08:96:34:ef:aa:de:2a:8f:e7:15:10:b0:00:
5e:14:41:fa:cb:e1:b1:96:76:e9:fc:96:e4:f0:d3:
5e:50:1d:31:c6:14:1c:45:03:e3:26:c5:59:4a:cf:
d6:46:89:29:cd:89:7d:fe:d9:90:19:aa:bb:66:ea:
8c:34:bc:2e:ad:d2:08:65:ff:44:d8:56:75:e9:97:
b2:d0:89:1b:fa:3f:20:0b:b9:90:b4:2b:35:c9:73:
85:a2:cf:7c:aa:6e:c5:0e:b9:cb:3e:3c:b4:f1:92:
ab:d5:1b:d9:1f:c8:49:47:01:48:b4:61:aa:db:08:
39:7e:20:88:2f:37:38:4d:e3:f2:eb:76:e6:86:f1:
f9:dd:69:14:da:3b:3d:cf:86:92:5f:01:a5:cc:99:
79:14:68:84:90:2a:81:c2:45:4b:e9:f0:78:6f:8d:
76:e0:41:fe:92:ef:f9:d8:6a:07:9e:d8:d4:b3:7c:
5c:e3:7f:09:1d:ef:6b:d3:8c:78:64:f7:f4:d1:f9:
1f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:6E:3F:C1:3B:25:28:0A:EB:F2:C6:24:0D:97:1C:7C:96:99:ED:79
X509v3 Authority Key Identifier:
keyid:D3:2D:1E:B0:EC:8E:F5:A2:30:45:7A:97:02:E7:AA:39:68:58:18:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0y0esOyO9aIwRXqXAueqOWhYGAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:3f:c7:00:61:16:93:9f:9f:80:99:40:3e:9b:44:d9:9d:cd:
36:da:9b:20:7e:a9:99:50:2c:10:2d:79:a1:06:f4:3a:ca:7a:
48:2a:cf:55:73:f1:1c:0c:3e:6f:1e:fc:9d:46:c4:d0:e2:4a:
d2:0a:df:9f:23:d3:4c:fa:20:35:78:71:7c:0e:57:b1:75:31:
d9:e1:58:79:7a:7e:95:5d:01:ea:11:e3:dc:c9:cf:04:ae:e9:
df:c0:5e:2a:4d:dc:8c:98:d3:d7:55:4f:c7:95:94:92:48:0f:
75:8b:f3:0f:9d:43:f6:23:31:c4:ef:9f:38:6e:73:2d:79:f1:
e6:4e:fb:af:40:89:2e:a1:a9:0e:75:6d:58:5e:9a:ad:d3:8e:
cb:5c:2e:bd:37:e1:6e:4c:89:9e:c4:a7:d8:2e:4a:c1:ef:d6:
71:79:a2:d8:aa:0f:85:2a:cc:37:38:34:89:76:4d:a5:26:50:
bf:37:70:6e:40:5c:4e:9d:b9:d5:c6:cb:de:a7:cf:56:f3:2a:
4c:ef:59:9e:8e:e4:d7:46:58:07:67:0e:10:3f:34:ee:c7:97:
b4:fb:4a:0c:0a:c6:eb:47:c3:6c:66:4b:b1:da:3b:e6:b9:d8:
0f:35:52:24:aa:61:23:c1:64:66:e3:16:f7:5b:e1:ac:94:01:
7b:3d:15:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZki+gezgRU8lCjm+2tSQkObMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzMmQxZWIwZWM4ZWY1YTIzMDQ1N2E5NzAyZTdhYTM5Njg1
ODE4MGMwHhcNMjUwOTA3MDcwMDM1WhcNMjUwOTA4MDcwMDM1WjAzMTEwLwYDVQQD
Eyg4ZjZlM2ZjMTNiMjUyODBhZWJmMmM2MjQwZDk3MWM3Yzk2OTllZDc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArALlRritIid7hu65i1LJuMDKjENK
O43WgYlWS1MVcxYBgdDdWHQsRRD1n6oNbmZVUs8j4l0skxjG7IJoEgiWNO+q3iqP
5xUQsABeFEH6y+Gxlnbp/Jbk8NNeUB0xxhQcRQPjJsVZSs/WRokpzYl9/tmQGaq7
ZuqMNLwurdIIZf9E2FZ16Zey0Ikb+j8gC7mQtCs1yXOFos98qm7FDrnLPjy08ZKr
1RvZH8hJRwFItGGq2wg5fiCILzc4TePy63bmhvH53WkU2js9z4aSXwGlzJl5FGiE
kCqBwkVL6fB4b4124EH+ku/52GoHntjUs3xc438JHe9r04x4ZPf00fkf2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI9uP8E7JSgK6/LGJA2XHHyWme15MB8GA1UdIwQY
MBaAFNMtHrDsjvWiMEV6lwLnqjloWBgMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHkwZXNPeU85YUl3UlhxWEF1ZXFPV2hZR0F3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi81MWQ0NDUtZjA3MC00Y2E5LWEwMmIt
MmUxZjliZTk1NTczLzEvMHkwZXNPeU85YUl3UlhxWEF1ZXFPV2hZR0F3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi81MWQ0NDUtZjA3MC00Y2E5LWEwMmItMmUxZjliZTk1NTcz
LzEvMHkwZXNPeU85YUl3UlhxWEF1ZXFPV2hZR0F3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiD/HAGEW
k5+fgJlAPptE2Z3NNtqbIH6pmVAsEC15oQb0Osp6SCrPVXPxHAw+bx78nUbE0OJK
0grfnyPTTPogNXhxfA5XsXUx2eFYeXp+lV0B6hHj3MnPBK7p38BeKk3cjJjT11VP
x5WUkkgPdYvzD51D9iMxxO+fOG5zLXnx5k77r0CJLqGpDnVtWF6ardOOy1wuvTfh
bkyJnsSn2C5Kwe/WcXmi2KoPhSrMNzg0iXZNpSZQvzdwbkBcTp251cbL3qfPVvMq
TO9Zno7k10ZYB2cOED807seXtPtKDArG60fDbGZLsdo75rnYDzVSJKphI8FkZuMW
91vhrJQBez0VGQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:25:13 2025 by rpki-client